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Keeping an organization safe and implementing a robust Certified Compliance 

cybersecurity Framework is a task beyond a particular Regulated and high security environments have complex 

software or solution. Enterprises need a reliable operating requirements as they are designed to tackle many threats, 

system to power the organization's workloads on the known and unknown. Therefore, developing or running 

public or the private cloud while it enables their workloads in these environments requires rigid 

cybersecurity strategy as well as their industry sector certifications. Ubuntu Advantage provides access to the 

or national requirements. necessary artifacts to comply with Common Criteria, an 
international (ISO/IEC 15408) computer security certification 

With Ubuntu Advantage, the enterprise-grade subscription For high security environments, and FIPS 140, the U.S. 

For Ubuntu, customers leverage an operating system government data protection profile. 

designed with the security mindset For today’s security 

andscape but also get a trusted partner of the open Secure configuration & hardening 

source community that enables open source applications The default configuration of Ubuntu balances usability and 

For high security and regulated environments, such as FIPS security. However, systems carrying dedicated workloads 

140 and Common Criteria while it collaborates with can be further hardened to reduce their attack surface. 

security organizations to gain access to vulnerabilities Canonical works with DISA to ensure the Security Technical 

before they are public. Ubuntu Advantage sets the Implementation Guides (STIG) are available for Ubuntu, and 

Foundation for a cybersecurity Framework, with Ubuntu Advantage customers get access to certified CIS 

provenance, vulnerability management, hardening and benchmark content to harden with the widely accepted 

compliance profiles such as CIS and DISA-STIG, while hardening guide using the OpenSCAP tooling. 

offering competitive economics. 





Vulnerability Management 






































. System administrators are constantly being challenged from 
Key benefits attackers looking for access in their infrastructure by 
exploiting software vulnerabilities. Defending infrastructure 
Predictable lifecycle requires timely access to software security updates, security 
Ubuntu LTS releases are made available every two years advisories, machine readable OVAL data for SIEM integration 
and are maintained For ten years with Ubuntu Advantage. and automation, including kernel livepatching, for the 
Each release comes in two five-year phases, Standard ifecycle of the systems. Extended Security Maintenance 
support and Extended Security Maintenance, both ESM), ensures that all the above are provided for Ubuntu's 
including security updates and kernel livepatching. 10-year lifecycle. Furthermore, Canonical ensures timely 
Fixes in vulnerabilities on the operating system, and targets 
a response time of up to'i day on average for critical and up 
to 14 days on average for high severity vulnerabilities. 





Standard Support phase Extended Security 


Maintenance phase Anti-exploitation defenses 
Maintenance updates Malicious software (malware) is the primary threat to 
Security updates organisations today, and can have a severe impact on 
Security updates operations. Using malware, attackers might be able to 


capture passwords, steal or even destroy sensitive corporate 
data. Ubuntu comes with state of the art anti-exploitation 
Yri Yr2. Yr3. Yr4 YrS | Yr6 Yr7 Yr8 Yr9 Yr10 malware defenses. It enables the latest industry best 
practices against vulnerability exploitation vectors, such as 
heap and stack protections, Address Space Layout 
Randomization (ASLR), non-executable memory, and 
applications are compiled to take advantage of the latest CPU 
security Features such as Intel’s Control-Flow Enforcement 
Technology (CET). Ubuntu systems support UEFI secure boot, 
and receive automatic security updates by default. 


Livepatching Livepatching 








Available with subscription 
Available free of charge driving our mission 


























How does Ubuntu Advantage compare to RHEL and SLES? 


While all companies distribute an operating system based on Linux, the technical implementations are very different. 
Ubuntu is based on the community-led Debian operating system, deriving conventions From it, while RHEL derives from 
Fedora (community based but led by Red Hat) and SuSe from OpenSuSe. The commercial terms are also very different with 
Ubuntu Advantage having a simple per host and per VM pricing policy. 


Physical Server Cloud / VMs 


Operating system Pricing Yearly price Pricing Yearly price 
model model 
Host w/ 1 Host w/ 4 

CPU socket | CPU sockets HOME 
Red Hat Enterprise Linux Per CPU F 
w/ Standard Support socket $799 $1598 Per VM-pair $799 $23970 
SuSe w/ Standard Per CPU . 
Support & Livepatching socket $2150 $4300 Per VM-pair $2150 $64500 
Ubuntu Advantagew/ |. perhos $750 $750 Per VM $250 $15000 


Standard Support 


1. Physical systems can host unlimited VMs 


Get started with Ubuntu 


To purchase Ubuntu Advantage, including the cybersecurity offering please visit ubuntu.com/advantage or contact 
our team below. 





(UK) +44 203 656 5291 
(US) +1737 2040291 
email: sales@canonical.com 
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